Ransomware Group intelligence

Orova

Active

Track Orova with 48 published victims and 3 known leak locations in a single intelligence view.

Victims 48 Known published victims in this dataset
First discovered 2026-08-04 Earliest victim discovery date
Last discovered 2026-08-04 Latest victim discovery date
Inactive since 0 days Days since the latest known victim
Top country United States 24 victims
Known locations 3 Leak or negotiation infrastructure tracked

Overview

Orova is tracked by Breach House as a ransomware group with 48 published victims.

United States is currently the most targeted country in this dataset.

3 known leak locations are currently associated with this group.

Top Countries

Interactive distribution based on the currently visible victims list.

Top Countries
Distribution

    Known Leak Locations (3)

    Label Type Availability Links
    Leak location 1 Onion service Unknown mzlajyncb2rafn5bsb7esmo73kyawjxeirunba27n6nermmafzlcp4qd.onion
    Leak location 2 Onion service Unknown mll5ddmdzgiq2siv3qnocmmqyiigfpajtc663xtf32qtp6weycyx2hyd.onion
    Leak location 3 Onion service Unknown ns7y6bxawualjj5rpo5num6syejd7hgaowrndk3r4duxu2iyinzv6hid.onion

    Top Activity Sectors

    No sector intelligence available.

    Research Sources

    No external research sources linked yet.

    Victims (48)

    Search, filter and paginate the victim timeline for Orova. Showing 1–48 of 48.

    Type Target Discovered Country Business Category Intel Link
    Ransomware ADG Healthcare id31224 View details Egypt Healthcare / Pharma
    Ransomware ADG Healthcare id31224 View details Egypt Healthcare / Pharma
    Ransomware eSysTech id31225 View details Brazil IT
    Ransomware eSysTech id31225 View details Brazil IT
    Ransomware Northeastern Communications & Electrical id31226 View details United States Construction / Real Estate
    Ransomware Northeastern Communications & Electrical id31226 View details United States Construction / Real Estate
    Ransomware Apollo Office System id31227 View details Japan IT
    Ransomware Apollo Office System id31227 View details Japan IT
    Ransomware EMPYREAN INT’L TECHNO DEVICES id31228 View details Taiwan, Province of China IT
    Ransomware EMPYREAN INT’L TECHNO DEVICES id31228 View details Taiwan, Province of China IT
    Ransomware Texas Medical Screening id31229 View details United States Healthcare / Medicine
    Ransomware Texas Medical Screening id31229 View details United States Healthcare / Medicine
    Ransomware Sc Regional Housing Authority id31230 View details United States NGOs / Associations
    Ransomware Sc Regional Housing Authority id31230 View details United States NGOs / Associations
    Ransomware Bjs Insurance & Financial id31231 View details United States Finance / Legal / Insurance
    Ransomware Bjs Insurance & Financial id31231 View details United States Finance / Legal / Insurance
    Ransomware Wisdom Oral Surgery id31232 View details United States Healthcare / Medicine
    Ransomware Wisdom Oral Surgery id31232 View details United States Healthcare / Medicine
    Ransomware SURE TRAVEL COMPANY id31233 View details Hong Kong Transportation / Travel / Logistics
    Ransomware SURE TRAVEL COMPANY id31233 View details Hong Kong Transportation / Travel / Logistics
    Ransomware SBI Manufacturing id31208 View details United States Manufacturing / Engineering
    Ransomware SBI Manufacturing id31208 View details United States Manufacturing / Engineering
    Ransomware Agricultural Chemical Solutions id31209 View details United States Agriculture / Food
    Ransomware Agricultural Chemical Solutions id31209 View details United States Agriculture / Food
    Ransomware DBM Reflex id31210 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware DBM Reflex id31210 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware Ultra Fame id31211 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware Ultra Fame id31211 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware Cardiology Associates id31212 View details United States Healthcare / Medicine
    Ransomware Cardiology Associates id31212 View details United States Healthcare / Medicine
    Ransomware Yost Home Improvements id31213 View details United States Construction / Real Estate
    Ransomware Yost Home Improvements id31213 View details United States Construction / Real Estate
    Ransomware KINGSSON id31214 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware KINGSSON id31214 View details Taiwan, Province of China Manufacturing / Engineering
    Ransomware SSI HOLDING (FAR EAST) LIMITED id31215 View details Hong Kong Other
    Ransomware SSI HOLDING (FAR EAST) LIMITED id31215 View details Hong Kong Other
    Ransomware Sanrio Hong Kong Co., Ltd id31216 View details Hong Kong Retail / E-commerce
    Ransomware Sanrio Hong Kong Co., Ltd id31216 View details Hong Kong Retail / E-commerce
    Ransomware Tat Fung Textile Co., Ltd. id31217 View details Hong Kong Manufacturing / Engineering
    Ransomware Tat Fung Textile Co., Ltd. id31217 View details Hong Kong Manufacturing / Engineering
    Ransomware Integrated Site Management id31218 View details United States Education
    Ransomware Integrated Site Management id31218 View details United States Education
    Ransomware Conceptual Designs, Inc. id31219 View details United States Construction / Real Estate
    Ransomware Conceptual Designs, Inc. id31219 View details United States Construction / Real Estate
    Ransomware JK Capital Management Limited id31220 View details Hong Kong Finance / Legal / Insurance
    Ransomware JK Capital Management Limited id31220 View details Hong Kong Finance / Legal / Insurance
    Ransomware Global Friction Products, Inc id31221 View details United States Manufacturing / Engineering
    Ransomware Global Friction Products, Inc id31221 View details United States Manufacturing / Engineering